Hi all,
I am going to update my lifecycle state transform to change how my organization calculates certain lifecycle states. I know that by doing this, the “source input” changes and SailPoint will recalculate all lifecycle states (even lifecycle states that have been manually set). I want to minimize disruption by turning off provisioning to AD while this is being done. After the transform has been changed, I will move the previously manually set identities back to their previous manual state. After this, I will reenable AD provisioning.
I want to ensure that I am not missing something in this process outlined above and there isn’t some queueing task mechanism where upon reenabling AD provisioning, SailPoint tries to perform a bunch of unnecessary changes.
If anyone has experience with this or has any thoughts, please let me know.